Zend Framework vulnerabilities

• zend framework An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary... CVE-2020-29312 Disputed 9.8 CriticalApril 4, 2023
• getlaminas laminas-http, zend framework +1 more Remote code execution in zendframework and laminas-http CVE-2021-3007 Public exploitFix availableDisputed EPSS 75.3% 9.8 CriticalJanuary 4, 2021
• zend framework, fedoraproject fedora, redhat enterprise linux +2 more Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow... CVE-2012-4451 Fix available 6.1 MediumJanuary 3, 2020
• debian linux, zend framework, zendframework +2 more ZF2014-03 has a potential cross site scripting vector in multiple view helpers CVE-2014-4913 6.1 MediumDecember 15, 2019
• php, zend framework, zendframework +1 more +3 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2011-1939 Public exploitFix available 9.8 CriticalNovember 26, 2019
• zend framework Zend Framework Allows SQL Injection CVE-2015-0270 Fix available 9.8 CriticalOctober 25, 2019
• zend framework Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows... CVE-2015-1555 9.1 CriticalAugust 7, 2017
• zend framework Zend Framework CSRF Vulnerability CVE-2015-1786 Fix available 8.8 HighJune 8, 2017
• zend zend-mail, framework +1 more zend-mail remote code execution via Sendmail adapter CVE-2016-10034 Public exploitFix available EPSS 38.4% 9.8 CriticalDecember 30, 2016
• zend framework, fedoraproject fedora +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2016-4861 Public exploitFix available 9.8 CriticalOctober 5, 2016
• zend framework, fedoraproject fedora +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2016-6233 Fix available 9.8 CriticalAugust 3, 2016
• zend framework Zend Framework Information Disclosure CVE-2015-7503 Fix available 7.5 HighMay 21, 2016
• zend framework, debian linux +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-7695 Fix available 9.8 CriticalOctober 6, 2015
• doctrine-project annotations, cache, common +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-5723 Fix available 7.8 HighOctober 6, 2015
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2015-5161 Public exploitFix available 6.8 MediumAugust 19, 2015
• zend framework Zenario CMS vulnerable to CRLF injection CVE-2015-3154 Fix available 6.1 MediumMay 20, 2015
• zend framework, fedoraproject fedora, redhat enterprise linux +2 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-8089 Fix available 9.8 CriticalOctober 29, 2014
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-8088 Fix available 5.0 MediumOctober 22, 2014
• zend framework, debian linux +1 more The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle... CVE-2014-4914 Fix available 9.8 CriticalAugust 5, 2014
• zend framework, zendopenid +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2685 Fix available 7.5 HighApril 3, 2014
• zend framework, zendopenid +1 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2684 Fix available 6.4 MediumApril 3, 2014
• zend framework, zendopenid, zendrest +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2683 Fix available 5.0 MediumApril 3, 2014
• zend framework, zendopenid, zendrest +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2682 Fix available 6.8 MediumApril 3, 2014
• zend framework, zendopenid, zendrest +7 more +9 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2014-2681 Fix available 6.4 MediumApril 3, 2014
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-6532 Fix available 5.0 MediumFebruary 13, 2013
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-6531 Fix available 6.4 MediumFebruary 13, 2013
• zend framework Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-5657 Fix available 5.0 MediumJanuary 8, 2013
• zend framework, debian linux, fedoraproject fedora +2 more Zendframework Local file disclosure via XXE injection in Zend_XmlRpc CVE-2012-3363 Public exploitFix available EPSS 49.3% 9.1 CriticalJune 29, 2012
• zend framework, server +1 more Zend Framework 1.11.3 in Zend Server CE 5.1.0 allows remote attackers to obtain sensitive... CVE-2011-3825 5.0 MediumSeptember 24, 2011
• zend framework The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context... CVE-2009-4417 5.0 MediumDecember 24, 2009
• zend framework preview Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections... CVE-2006-5900 6.8 MediumNovember 15, 2006